Opera < 10.53 Asynchronous Content Modification Uninitialized Memory Access

The version of Opera installed on the remote host is earlier than 10.53. Such versions are potentially affected by the following issue : - Multiple asynchronous calls to a script that modifies document contents can be abused to reference an uninitialized value, leading to an application crash or...

Opera Software Releases Opera 10.53

Opera Software has released Opera 10.53 to address a vulnerability. Exploitation of this vulnerability may allow an attacker to execute arbitrary code. US-CERT encourages users and administrators to review the Opera Software security advisory related to this vulnerability and upgrade to Opera 10....

Multiple asynchronous document modifications can be used to execute arbitrary code

Multiple asynchronous calls to a script that modifies the document contents can cause Opera to reference an uninitialized value, which may lead to a crash. To inject code, additional techniques will have to be employed...

Opera 10.x Content Writing Uninitialised Memory Vulnerability

A vulnerability has been discovered in Opera, which can be exploited by malicious people to compromise a user's system. The vulnerability is caused due to an error when e.g. continuously writing content to a page using document.write and results in a function call using uninitialised memory when ...

Canvas Tag Denial Of Service

"; while 1 echo ""; echo ""; echo ""; ?...

Multiple asynchronous document modifications can be used to execute arbitrary code – Opera Security Advisories

Multiple asynchronous document modifications can be used to execute arbitrary code – Opera Security Advisories OPCOM Team | April 28, 2010 Affected versions This vulnerability affects Opera for Windows and Mac. Severity Extremely Severe Description Multiple asynchronous calls to a script that...

WebKit 532.5 Stack Exhaustion

loop; function loop setIntervaldoit,0; function doit var b=""; document.writeb; setIntervalloop,0;...

Canvas tag DoS - Multiple Browsers

Exploit for multiple platform in category dos / poc ================================== Canvas tag DoS - Multiple Browsers ================================== "; while 1 echo ""; echo ""; echo ""; ? 0day.today 2018-04-11...

WebKit 532.5 - Stack Exhaustion

WebKit 532.5 - Stack Exhaustion loop; function loop setIntervaldoit,0; function doit var b=""; document.writeb; setIntervalloop,0;...

WebKit 532.5 - Stack Exhaustion

loop; function loop setIntervaldoit,0; function doit var b=""; document.writeb; setIntervalloop,0;...

Opera Browser 'Content-Length' Header Buffer Overflow Vulnerability (Windows)

The host is installed with Opera Web Browser and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gboperacontentlengthheaderbofvulnwin.nasl 5323 2017-02-17 08:49:23Z teissa $ Opera Browser 'Content-Length' Header Buffer Overflow Vulnerability Windows Authors: Antu Sanadi...

Opera Browser 'Content-Length' Header Buffer Overflow Vulnerability (Linux)

The host is installed with Opera Web Browser and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gboperacontentlengthheaderbofvulnlin.nasl 5323 2017-02-17 08:49:23Z teissa $ Opera Browser 'Content-Length' Header Buffer Overflow Vulnerability Linux Authors: Antu Sanadi...

Opera 'XSLT' Information Disclosure Vulnerability - (Windows)

The host is installed with Opera Web Browser and is prone to information disclosure vulnerability. OpenVAS Vulnerability Test $Id: gboperaxsltinfodiscvulnwin.nasl 5323 2017-02-17 08:49:23Z teissa $ Opera 'XSLT' Information Disclosure Vulnerability - Windows Authors: Antu Sanadi Copyright: Copyrig...

Opera Browser 'Content-Length' Header Buffer Overflow Vulnerability - Linux

Opera Web Browser is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Opera 'XSLT' Information Disclosure Vulnerability - Windows

Opera Web Browser is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Opera Browser 'Content-Length' Header Buffer Overflow Vulnerability - Windows

Opera Web Browser is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Integer overflow

Integer overflow in Opera 10.10 through 10.50 allows remote attackers to execute arbitrary code via a large Content-Length value, which triggers a heap overflow...

CVE-2010-1349

Integer overflow in Opera 10.10 through 10.50 allows remote attackers to execute arbitrary code via a large Content-Length value, which triggers a heap overflow...

CVE-2010-1349

Opera 10.10–10.50 contains a Content-Length header handling bug that can trigger a heap overflow, enabling remote code execution. Multiple connected advisories confirm a buffer/heap overflow vulnerability in Opera related to processing HTTP server replies and Content-Length values. Affected versi...

CVE-2010-1349

Integer overflow in Opera 10.10 through 10.50 allows remote attackers to execute arbitrary code via a large Content-Length value, which triggers a heap overflow...